General
- Target 2026-08-10_2db4233241727f34a7ad67f85e906ecf_amadey_darkgate_elex_glassworm_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_vidar
- Size 8.2MB
- Sample260810-dckqksdg26
- SHA256 876a5cc3be9e745f4c14f4373c16fc5a51a89847cd7b775119cb5ef97e46d855
- MD5 2db4233241727f34a7ad67f85e906ecf
- SHA1 e48bbcc7a0652402005babb9d78806d3e806d329
- SHA512 16d9f9986d019f0103bcbd78f26f66fa8f10cfa39d747c96872dd2c52c613da7d92d6626ef58752d49591e9f658e1f9feef46df35cdff8a66c9902f7196c5497
- SSDEEP 98304:BMw/ruqbGT/PkXq9ouFkULGyqobNq1Mft5rG6uPO276HoVNmnolMsFiHtGh1hN5N:BD/ruqCTb9+ULdNPtbuPZOOmnqogHh/p
- TLSH T10C86E12EF7E440B6D46B8176C8649326D676F46493248BC72394871DEF336D36E3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_2db4233241727f34a7ad67f85e906ecf_amadey_darkgate_elex_glassworm_hellokitty_hijackloader_i.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_2db4233241727f34a7ad67f85e906ecf_amadey_darkgate_elex_glassworm_hellokitty_hijackloader_i.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_2db4233241727f34a7ad67f85e906ecf_amadey_darkgate_elex_glassworm_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_vidar
- Size 8.2MB
- SHA256 876a5cc3be9e745f4c14f4373c16fc5a51a89847cd7b775119cb5ef97e46d855
- MD5 2db4233241727f34a7ad67f85e906ecf
- SHA1 e48bbcc7a0652402005babb9d78806d3e806d329
- SHA512 16d9f9986d019f0103bcbd78f26f66fa8f10cfa39d747c96872dd2c52c613da7d92d6626ef58752d49591e9f658e1f9feef46df35cdff8a66c9902f7196c5497
- SSDEEP 98304:BMw/ruqbGT/PkXq9ouFkULGyqobNq1Mft5rG6uPO276HoVNmnolMsFiHtGh1hN5N:BD/ruqCTb9+ULdNPtbuPZOOmnqogHh/p
- TLSH T10C86E12EF7E440B6D46B8176C8649326D676F46493248BC72394871DEF336D36E3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory